Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

North Korea-linked Lazarus group’s latest “Operation Dream Job” campaign weaponizes fake job offers and trojanized PDF viewers to target the global defense sector, leveraging a Windows kernel zero-day (CVE-2026-68820), new modular malware, and compromised web infrastructure for stealthy, persistent access and lateral spear-phishing.